$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/ABD5003E079C11EBA7C04832C4F9AE02.roa File: ABD5003E079C11EBA7C04832C4F9AE02.roa (raw, json) Hash identifier: 778EGlGgVJG4KhFCrh96xdUIIB8BVjBB6yGmPip2Cyc= Subject key identifier: 22:80:0C:64:ED:90:66:2A:18:6A:76:AD:78:0B:C0:5D:EC:25:49:C3 Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Certificate serial: 082E Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/ABD5003E079C11EBA7C04832C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:23:57 +0000 ROA not before: Thu 02 Oct 2025 21:22:51 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 38880 IP address blocks: 103.195.207.0/24 maxlen: 24 2001:df6:2400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80 Validity Not Before: Oct 2 21:22:51 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a42fdd-431f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:30:44:86:cd:52:b1:f6:80:f8:fd:2d:48:fa: 3c:33:87:c0:59:b8:28:b2:58:8c:3b:77:74:27:06: bd:d4:b3:1e:11:7f:e8:cb:5d:d7:cf:d4:ce:43:6e: 4c:1c:d1:ca:ff:35:64:4a:8d:0c:13:77:bb:6f:b5: 17:4f:70:7f:86:60:6e:9e:3a:36:51:ec:e6:c8:b6: 56:ab:b4:a4:0a:8f:ac:21:61:73:e7:14:c0:e6:3b: a2:33:88:5f:86:a2:7e:bd:0f:c7:fd:c8:61:02:83: d7:1e:83:cf:9d:03:89:32:16:39:12:99:f3:ef:ee: e3:68:7c:c5:9d:db:27:f7:e8:a2:f1:fe:f2:8c:b0: 19:ef:a5:61:02:7e:9e:ce:f8:35:12:55:94:6b:b2: 26:56:a4:95:5c:bc:d0:86:dc:9a:cf:d3:b8:84:05: e9:0d:00:28:f6:b3:00:ad:dc:17:bf:59:b9:55:12: 8f:af:c4:51:cf:39:ac:12:12:c3:65:1a:5f:eb:6d: 0c:db:1d:96:05:51:c2:ce:ad:12:26:2c:fa:ab:08: a4:e4:11:43:df:28:c4:a0:84:06:62:22:88:12:3f: 61:c0:30:88:cc:c2:80:0c:82:6b:48:15:e3:3e:95: 4c:3e:47:c3:dd:c1:0a:60:0b:4e:b9:0f:19:1a:7c: 56:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:80:0C:64:ED:90:66:2A:18:6A:76:AD:78:0B:C0:5D:EC:25:49:C3 X509v3 Authority Key Identifier: keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/ABD5003E079C11EBA7C04832C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.195.207.0/24 IPv6: 2001:df6:2400::/48 Signature Algorithm: sha256WithRSAEncryption 77:b4:b6:75:28:c3:46:42:d3:d3:7c:0e:3d:a5:1b:92:99:50: af:94:b3:b9:7d:cd:1f:44:09:72:0d:74:ae:f5:6d:7e:79:10: 14:e5:fa:e6:14:0b:a0:04:f0:11:36:00:32:ae:9b:3c:af:08: 7d:4f:49:49:b3:0b:b6:93:5d:f4:10:65:17:7c:bf:1e:98:42: c1:0e:70:3b:0f:c7:39:71:67:bf:ca:27:93:ba:1f:18:85:f8: 20:eb:5e:f8:b6:b3:8c:0c:d7:57:5f:b0:52:07:74:17:e7:ef: ad:2c:67:a4:60:8a:fe:95:34:5c:8c:fd:bf:da:3a:45:ae:06: a8:a8:83:f1:f5:17:2b:87:b6:55:c9:b3:6e:88:e4:67:e6:ad: 44:da:c7:84:ea:95:38:2c:45:4c:82:9f:99:01:aa:25:77:18: 68:61:e0:e8:4a:df:c4:37:de:42:29:33:02:3b:f8:f7:69:6d: a0:80:70:d2:84:da:89:85:09:79:01:38:bc:8a:f9:fa:bb:06: 66:4a:9c:a3:6f:90:e4:4c:c5:eb:b3:63:14:dd:c6:50:c3:f0: a7:b5:16:e6:4b:70:5a:2a:a2:78:bb:ce:e6:27:05:63:39:b1: 32:c5:ab:fc:c4:5a:fe:2b:0b:94:39:50:4f:46:53:99:38:b3: 86:70:b9:cc -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy ODk1RThDODAwHhcNMjUxMDAyMjEyMjUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmZkZC00MzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TBEhs1SsfaA+P0tSPo8M4fAWbgosliMO3d0Jwa91LMeEX/oy13Xz9TOQ25M HNHK/zVkSo0ME3e7b7UXT3B/hmBunjo2UezmyLZWq7SkCo+sIWFz5xTA5juiM4hf hqJ+vQ/H/chhAoPXHoPPnQOJMhY5Epnz7+7jaHzFndsn9+ii8f7yjLAZ76VhAn6e zvg1ElWUa7ImVqSVXLzQhtyaz9O4hAXpDQAo9rMArdwXv1m5VRKPr8RRzzmsEhLD ZRpf620M2x2WBVHCzq0SJiz6qwik5BFD3yjEoIQGYiKIEj9hwDCIzMKADIJrSBXj PpVMPkfD3cEKYAtOuQ8ZGnxWEwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCKADGTt kGYqGGp2rXgLwF3sJUnDMB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3 OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQyM0IvQUY3NTZCOTQwNzlCMTFFQkE0ODI4MDMxQzRGOUFFMDIvQUJENTAwM0Uw NzlDMTFFQkE3QzA0ODMyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ8PPMA8EAgACMAkDBwAgAQ32JAAwDQYJKoZIhvcNAQELBQADggEB AHe0tnUow0ZC09N8Dj2lG5KZUK+Us7l9zR9ECXINdK71bX55EBTl+uYUC6AE8BE2 ADKumzyvCH1PSUmzC7aTXfQQZRd8vx6YQsEOcDsPxzlxZ7/KJ5O6HxiF+CDrXvi2 s4wM11dfsFIHdBfn760sZ6Rgiv6VNFyM/b/aOkWuBqiog/H1FyuHtlXJs26I5Gfm rUTax4TqlTgsRUyCn5kBqiV3GGhh4OhK38Q33kIpMwI7+PdpbaCAcNKE2omFCXkB OLyK+fq7BmZKnKNvkORMxeuzYxTdxlDD8Ke1FuZLcFoqoni7zuYnBWM5sTLFq/zE Wv4rC5Q5UE9GU5k4s4Zwucw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:14:21 2026 by rpki-client